UbuntuUpdates.org

Package "trafficserver"

Name: trafficserver

Description:

fast, scalable and extensible HTTP/1.1 and HTTP/2.0 caching proxy server
Latest version: 9.2.3+ds-1+deb12u1ubuntu0.1
Release: noble (24.04)
Level: security
Repository: universe
Homepage: https://trafficserver.apache.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "trafficserver"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "trafficserver" in Noble

Repository Area Version
base universe 9.2.3+ds-1+deb12u1build4
updates universe 9.2.3+ds-1+deb12u1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 9.2.3+ds-1+deb12u1ubuntu0.1 2026-02-18 16:10:35 UTC

  trafficserver (9.2.3+ds-1+deb12u1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read in get_host_port_values
    (LP: #2141624)
    - debian/patches/0023-CVE-2024-50305.patch: Fix out-of-bounds read
      in MIMEHdr::get_host_port_values.
    - CVE-2024-50305

 -- Titi Wangsa Damhore <email address hidden> Wed, 11 Feb 2026 18:40:38 -0800
2141624 CVE-2024-50305: out-of-bounds read in trafficserver get_host_port_values
CVE-2024-50305 Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2


About   -   Send Feedback to @ubuntu_updates